Add top-level permission for release

11ty · Aug 8, 2024 · 9bb85f8 · 9bb85f8
1 parent e11f479
commit 9bb85f8
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -17,6 +17,6 @@ jobs:
           node-version: ${{ matrix.node }}
           # cache: npm
       - run: npm install
-      - run: npm run test
+      - run: npm test
 env:
   YARN_GPG: no
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -2,6 +2,7 @@ name: Publish Release to npm
 on:
   release:
     types: [published]
+permissions: read-all
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -15,7 +16,7 @@ jobs:
           node-version: "20"
           registry-url: 'https://registry.npmjs.org'
       - run: npm install
-      - run: npm run test
+      - run: npm test
       - if: ${{ github.event.release.tag_name != '' && env.NPM_PUBLISH_TAG != '' }}
         run: npm publish --provenance --access=public --tag=${{ env.NPM_PUBLISH_TAG }}
         env: